CVE-2014-1210

VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate.

Score

CVSS 2.0 5.8 Medium

Status

Modified - cve@mitre.org

Published

2014-04-11

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Vsphere Client (Vmware)

References

• http://www.vmware.com/security/advisories/VMSA-2014-0003.html